You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Aim Worm

Hi I've recently downloaded AVG Anti-Spyware and found that I have Worm.AimVen on my computer. I've tried finding guides to remove it perminately but none have helped, it just keeps coming back. Any help would be very appreciated!!

I also find V.exe in my search of hidden files on my C drive not sure what it is..

Before clicking the Finish button, make sure that these 2 boxes are checked (ticked):

Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware

Malwarebytes' Anti-Malware will now check for updates. If your firewall prompts, please allow it. If you can't update it, select the Update tab. Under Update Mirror, select one of the websites and click on Check for Updates.

Select the Scanner tab. Click on Perform full scan, then click on Scan.

Leave the default options as it is and click on Start Scan.

When done, you will be prompted. Click OK, then click on Show Results.

Checked (ticked) all items and click on Remove Selected.

After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.

This tool generates a log file (sysclean.log) in the same folder where the scan is completed - C:\Sysclean.

When using Sysclean its best to use the Administrator's account or an account with Administrative rights otherwise you will not have access rights to scan some locations. You can alsoUse the "Run As" Commandto Start a Program as an Administrator. Even when doing that, the scanning process may result in "Access Denied" messages for some files. This is normal because these files are protected by the system.

The infected RP***\A00*****.exe file(s) identified by your scan is in the System Volume Information Folder (SVI) which is a part of System Restore. This is the feature that allows you to set points in time to roll back your computer to a clean working state. The SIV folder is protected by permissions that only allow the system to have access and is hidden by default unless you have reconfigured Windows to show it.

System Restore will back up the good as well as the bad files so when malware is present on the system it gets included in any restore points as an A00***** file. When you scan your system with anti-virus or anti-malware tools, they may detect and place these files in quarantine. When an anti-virus quarantines a file by moving it into a virus vault (chest), that file is essentially disabled and prevented from causing any harm to your system. The quarantined file is safely held there and no longer a threat until you take action to delete it.